This is an automated email from the ASF dual-hosted git repository. slachiewicz pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/maven-resources-plugin.git
commit d3dd836bb52352495549c82afd755024036ad179 Author: Gerd Aschemann <[email protected]> AuthorDate: Sun Oct 25 14:05:58 2026 +0100 Keep Dependabot off Maven 4 deps on the 3.x line master now carries the Maven 3 line after the apache/maven-sources#57 branch switch. The default Dependabot block had no upper bound on the org.apache.maven core artifacts, so once Maven 4 reaches GA Dependabot would bump mavenVersion to 4.0.0 on the Maven 3 line. Pin org.apache.maven below the 4.x boundary, mirroring the existing SLF4J/Mockito ignores. The *-4.x target-branch block is untouched, so the Maven 4 line keeps tracking 4.x. Refs: apache/maven-sources#57 Co-Authored-By: Claude Opus 4.8 <[email protected]> --- .github/dependabot.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 0193a6e..780d54e 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -33,6 +33,9 @@ updates: # Maven 3 so use SLF4J 1.7.x - dependency-name: "org.slf4j:*" versions: [">= 2.0.0"] + # Maven 3 line: stay on Maven 3 core (4.x lives on the -4.x branch) + - dependency-name: "org.apache.maven:*" + versions: [">= 4.0.0"] - package-ecosystem: "github-actions" directory: "/"
